@bitbonsai/mcpvault 0.14.0 → 0.14.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"pathfilter.d.ts","sourceRoot":"","sources":["../../src/pathfilter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,qBAAa,UAAU;IAOrB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAMxC;IAEH,OAAO,CAAC,eAAe,CAAW;IAClC,OAAO,CAAC,iBAAiB,CAAW;IAEpC,YAAY,MAAM,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,EAuB7C;IAED,OAAO,CAAC,eAAe;IAoBvB;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAQ5B,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAuB/B;IAED,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUzC;IAED,OAAO,CAAC,aAAa;
|
|
1
|
+
{"version":3,"file":"pathfilter.d.ts","sourceRoot":"","sources":["../../src/pathfilter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,qBAAa,UAAU;IAOrB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAMxC;IAEH,OAAO,CAAC,eAAe,CAAW;IAClC,OAAO,CAAC,iBAAiB,CAAW;IAEpC,YAAY,MAAM,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,EAuB7C;IAED,OAAO,CAAC,eAAe;IAoBvB;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAQ5B,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAuB/B;IAED,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUzC;IAED,OAAO,CAAC,aAAa;IA+BrB,OAAO,CAAC,MAAM;IA0Bd,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAErC;CACF"}
|
package/dist/src/pathfilter.js
CHANGED
|
@@ -99,10 +99,12 @@ export class PathFilter {
|
|
|
99
99
|
// (".Git/config", ".git./config", ".git /config") cannot bypass the deny-list
|
|
100
100
|
// on case-insensitive / Windows filesystems.
|
|
101
101
|
const canonicalPath = this.canonicalizeForMatch(normalizedPath);
|
|
102
|
-
// Deny restricted directories/files at any depth
|
|
103
|
-
//
|
|
102
|
+
// Deny hidden paths and restricted directories/files at any depth. Dotfiles
|
|
103
|
+
// are outside the public vault-note surface even when their suffix looks
|
|
104
|
+
// like an allowed note extension (for example, `.secrets.md`).
|
|
104
105
|
for (const segment of canonicalPath.split('/')) {
|
|
105
|
-
if (
|
|
106
|
+
if (segment.startsWith('.') ||
|
|
107
|
+
PathFilter.RESTRICTED_SEGMENTS.has(segment.toLowerCase())) {
|
|
106
108
|
return true;
|
|
107
109
|
}
|
|
108
110
|
}
|
package/package.json
CHANGED